Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: C+orDUOqemyRvMx8YfU16jPfP60wfJR2c97uqRTJDQI=
Subject key identifier: BA:17:41:84:FB:C3:D9:C5:71:C4:FA:20:46:3F:5C:25:A3:E1:56:7E
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019CACEB904D85D3726379F072DE8F65BA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 04B8
Signing time: Mon 02 Mar 2026 05:00:44 +0000
Manifest this update: Mon 02 Mar 2026 05:00:44 +0000
Manifest next update: Tue 03 Mar 2026 05:00:44 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: tIsPCyyQ6HOm7Ui1Grzj3d9ThZnE9WitE79WQ9T7dnA=)
2: ujXjrHSBskkRtzQpgabT3c58RZQ.roa (hash: hcJwU6ySjyVPwOkpMUkEEZB++4hAYjO13djZi7l/+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:90:4d:85:d3:72:63:79:f0:72:de:8f:65:ba:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Mar 2 05:00:44 2026 GMT
Not After : Mar 3 05:00:44 2026 GMT
Subject: CN=ba174184fbc3d9c571c4fa20463f5c25a3e1567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:ba:21:2d:b6:ec:e1:ca:0d:ca:dd:40:b3:
74:f4:a4:71:4b:29:35:3a:3e:34:9a:36:e1:6a:1f:
ec:1e:f9:76:ce:ed:c4:96:70:12:5e:2e:eb:e8:98:
6e:4a:4f:a0:e0:be:d7:c2:c8:5a:3f:3d:61:6e:ba:
2a:80:77:88:77:47:01:66:08:69:0c:46:df:4d:c8:
15:f9:4c:05:83:fc:32:4e:4f:b3:19:8a:27:61:6b:
7a:79:ce:da:10:9e:9e:a4:69:ba:42:bd:55:fa:8a:
df:d5:89:4f:67:31:09:fd:0f:b1:d5:2b:27:7a:c9:
66:f0:95:f3:7f:87:ab:4a:bf:0a:10:07:10:17:9f:
a7:80:db:91:bd:12:33:4d:8d:20:b7:37:9f:3f:ce:
e1:96:03:13:61:c6:48:7c:6b:50:a5:14:3f:c3:c9:
60:5f:8d:94:15:4b:c9:c4:79:75:fd:41:e0:32:8b:
10:fd:e6:d1:cf:59:d6:0e:c5:cb:f8:22:2f:23:5e:
b9:2e:17:91:62:7d:46:67:59:50:9a:c9:51:4c:f9:
fa:78:2e:e8:3b:62:2e:2b:9f:39:85:f0:56:dc:4b:
11:fc:b7:d0:e2:23:84:de:6c:05:28:85:41:62:44:
b8:d8:68:c2:46:85:14:06:31:8d:ab:b9:db:ce:36:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:41:84:FB:C3:D9:C5:71:C4:FA:20:46:3F:5C:25:A3:E1:56:7E
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:08:56:f5:97:4a:76:2d:c5:87:81:39:14:e7:5c:13:86:21:
18:9c:4b:23:d1:22:91:69:30:cf:fb:92:8a:3c:ab:2a:0e:fe:
17:c6:f7:62:ee:a5:b3:ba:4e:30:cf:2b:90:3d:b9:e6:ca:02:
49:c3:46:27:75:d2:22:4d:11:ce:3f:ee:ce:94:49:a3:21:4f:
d6:a4:21:4d:83:08:d7:ae:6e:8e:0c:df:87:5b:fb:53:92:0d:
e7:ef:f8:1b:ee:0b:44:a8:71:f2:bb:55:2c:7a:bc:d8:c7:4a:
7a:c1:75:6c:c2:42:30:c5:19:5b:64:1f:7a:ef:31:26:4f:1f:
c5:46:b1:40:7c:b0:40:b7:fa:ac:d7:ef:61:f7:af:62:96:e1:
c6:cc:fe:d1:c9:a6:4d:88:eb:49:01:af:9e:92:7e:2c:3c:08:
8f:68:77:d0:bb:85:8a:52:2e:05:9a:90:34:40:07:a9:84:de:
a9:93:2c:9e:71:bf:e7:a4:9d:68:48:23:1a:6e:06:88:8f:6d:
7d:a4:2d:14:d5:88:0f:b1:2c:d6:dc:35:b7:5d:fd:c5:ff:a3:
4f:95:71:62:c9:0c:28:37:82:f7:85:c5:6a:96:cd:31:ff:34:
90:71:b4:83:24:c0:81:65:b8:f1:71:30:3c:3f:41:34:01:92:
03:13:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:25 2026 by rpki-client